Description
Certain backend drivers in the SANE library 1.0.3 and earlier, as used in frontend software such as XSane, allows local users to modify files via a symlink attack on temporary files.
References
- xsane-temp-symlink(7714) vdb-entry
- RHSA-2001:171 vendor-advisory
- 3987 vdb-entry